Vendor
Warp-tech
12 known vulnerabilities in products by Warp-tech, 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-58491 | Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter | 9.3 | |
| High | CVE-2026-63330 | Warp-tech Warpgate: Improper Authorization | 7.7 | |
| Medium | CVE-2026-91167 | Warp-tech Warpgate: Missing Authorization | — | |
| High | CVE-2023-48712 | User authorization bug leading to privilege escalation in warpgate | 7.1 | |
| Medium | CVE-2026-91164 | Warpgate: API tokens bypass the user's allowed_ip_ranges restriction | 4.3 | |
| Medium | CVE-2026-91166 | Warp-tech Warpgate: Improper Validation of Certificate with Host Mismatch | 5.7 | |
| Medium | CVE-2026-63329 | Warp-tech Warpgate: Authentication Bypass by Spoofing | 4.9 | |
| Medium | CVE-2023-28113 | russh may use insecure Diffie-Hellman keys | 5.9 | |
| High | CVE-2023-37268 | User login confusion with SSO in warpgate | 6.4 | |
| Medium | CVE-2026-44347 | Warpgate: SSO CSRF -- State Token Not Validated on Return | 6.5 | |
| Low | CVE-2026-91165 | Warpgate: Markup injection in SSO form_post return page via unencoded redirect/error values | 2.4 | |
| High | CVE-2023-43660 | SSH key password bypassed in warpgate | 4.8 |
Products
| Warpgate | 11 | 0 |